Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/79ebc6-617b-4ea9-b453-4360ee06a22c/1/MksgMsOPsX9C-IMqTCHh8NXxnuA.mft
File: MksgMsOPsX9C-IMqTCHh8NXxnuA.mft (raw, json)
Hash identifier: xnhOfXydZxGG+EB8UZODDimAaZ+LGEozBV2n7FiINWY=
Subject key identifier: 5C:A0:48:42:63:B5:A0:EF:ED:49:56:F0:1F:01:B6:06:52:51:47:72
Authority key identifier: 32:4B:20:32:C3:8F:B1:7F:42:F8:83:2A:4C:21:E1:F0:D5:F1:9E:E0
Certificate issuer: /CN=324b2032c38fb17f42f8832a4c21e1f0d5f19ee0
Certificate serial: 019F916C8605F67DD483B9DEDB11A2BD4C15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MksgMsOPsX9C-IMqTCHh8NXxnuA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/79ebc6-617b-4ea9-b453-4360ee06a22c/1/MksgMsOPsX9C-IMqTCHh8NXxnuA.mft
Manifest number: 066E
Signing time: Fri 24 Jul 2026 00:00:36 +0000
Manifest this update: Fri 24 Jul 2026 00:00:36 +0000
Manifest next update: Sat 25 Jul 2026 00:00:36 +0000
Files and hashes: 1: 9JWWBiVNBen9pncBrzjpQmgz09A.roa (hash: v34m3+DepC1ZbOZkinh5zqdAB+5w919QO3AxXhxzrps=)
2: MksgMsOPsX9C-IMqTCHh8NXxnuA.crl (hash: EVni80UJPRtUilqHcbE71Rs+NUJX3jwtF2YvE0rgI3A=)
3: u7jMNIMMII00JBcKO8wDUJlUVU4.asa (hash: zA/s57FfxROY3FHHSRpxczkmgyVm2XOsYnoz6z+SZ2I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/79ebc6-617b-4ea9-b453-4360ee06a22c/1/MksgMsOPsX9C-IMqTCHh8NXxnuA.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/79ebc6-617b-4ea9-b453-4360ee06a22c/1/MksgMsOPsX9C-IMqTCHh8NXxnuA.mft
rsync://rpki.ripe.net/repository/DEFAULT/MksgMsOPsX9C-IMqTCHh8NXxnuA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:6c:86:05:f6:7d:d4:83:b9:de:db:11:a2:bd:4c:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=324b2032c38fb17f42f8832a4c21e1f0d5f19ee0
Validity
Not Before: Jul 24 00:00:36 2026 GMT
Not After : Jul 25 00:00:36 2026 GMT
Subject: CN=5ca0484263b5a0efed4956f01f01b60652514772
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:99:6e:4b:a8:40:4f:d6:4f:e1:de:2c:1f:53:
f1:c6:53:cf:7d:90:3f:14:a3:cb:df:2c:0e:ae:50:
49:8e:4e:01:77:5c:ed:dd:0c:cd:87:7f:17:ab:d9:
f2:84:8a:bf:66:d1:16:55:8f:bd:16:44:1d:78:26:
90:91:0e:85:b9:b3:d2:91:af:25:bf:89:81:69:8b:
6d:a7:cd:ff:4c:a4:77:10:8a:f7:52:19:a4:c3:6b:
da:8f:2f:3a:1d:80:5d:cd:70:a8:18:fa:79:e4:27:
f2:03:93:d6:4d:60:1e:9f:75:3a:aa:99:f1:15:ec:
e6:1a:06:71:ad:38:c9:7a:60:cd:d6:f3:39:81:3e:
57:d5:e4:b8:ad:9e:d9:b3:ba:24:9c:62:f3:52:27:
c2:9b:b1:f4:1b:38:03:55:7c:63:ef:26:3a:a4:40:
bc:3c:d3:72:db:8f:0e:bf:f2:bd:ff:2d:00:fd:d3:
33:93:84:ab:f7:96:31:6a:70:53:15:63:be:8a:a0:
0e:e6:ad:12:ea:f2:4c:3e:c6:31:b9:81:c4:42:12:
01:d3:5d:1b:e3:4a:b5:b4:d1:60:92:87:32:28:a0:
c9:14:4d:c4:aa:15:74:3c:ba:14:e0:55:25:be:3f:
8d:8b:25:ee:b9:8a:fa:0d:2b:63:7e:55:8e:c8:9c:
db:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:A0:48:42:63:B5:A0:EF:ED:49:56:F0:1F:01:B6:06:52:51:47:72
X509v3 Authority Key Identifier:
keyid:32:4B:20:32:C3:8F:B1:7F:42:F8:83:2A:4C:21:E1:F0:D5:F1:9E:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MksgMsOPsX9C-IMqTCHh8NXxnuA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/79ebc6-617b-4ea9-b453-4360ee06a22c/1/MksgMsOPsX9C-IMqTCHh8NXxnuA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/79ebc6-617b-4ea9-b453-4360ee06a22c/1/MksgMsOPsX9C-IMqTCHh8NXxnuA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:5c:e6:85:74:8f:78:0e:3e:ba:c2:f3:f4:4c:93:65:f4:43:
a2:54:7f:71:b4:08:d7:93:6f:01:da:09:bf:ed:e2:57:d3:65:
36:76:5e:ca:b1:1f:e4:cd:4c:76:e6:8b:b1:9e:5a:08:a1:02:
42:35:16:57:4a:a0:38:2a:b7:58:bd:f0:51:d9:9b:cf:c6:f2:
a5:1c:bf:aa:8b:46:e2:44:4b:56:3a:6d:23:d7:dc:0e:fc:55:
d6:64:42:a8:8e:fc:2e:66:a4:14:8e:c1:33:7f:8e:93:05:95:
93:81:c1:01:46:24:1d:c9:4f:2c:a1:48:3f:07:ae:f8:48:5b:
67:01:76:f5:0d:43:e8:b6:17:3d:0e:7d:81:5c:c6:11:ea:b1:
dc:44:dc:a0:a2:59:15:30:4e:4e:be:8d:21:13:7e:ea:6d:1e:
7a:f0:5d:a4:ef:dc:99:ab:bd:7a:93:6c:8b:b8:e6:54:1f:03:
a7:86:37:bf:b9:f4:07:fd:dc:99:3e:1b:39:69:42:18:9e:3f:
3c:e2:92:1b:37:ef:b5:29:8b:4a:85:d3:b6:24:7d:40:7f:3c:
9d:36:2c:01:cd:67:a7:b7:ed:d4:14:fc:93:d0:d8:6b:70:15:
99:3f:9a:bb:dc:c0:4b:d9:b0:cd:59:fc:26:11:54:b8:7a:20:
ac:c2:50:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:08:46 2026 by rpki-client